Application No.: 10/527397 Docket No.: 47253-00056USPX 

AMENDMENTS TO THE CLAIMS 

1. (CURRENTLY AMENDED) A method of providing to a client communications device 
access to a subscription module of a server communications device, the method comprising the 
steps of i 

establishing (301) a communications link between the client communications device 
(300) and the server communications device (310) ; and 

communicating (30 4 ; 4 03, 4 0 4 ) a number of messages (M) comprising data related to the 
subscription module (3 18) between the server communications device and the client 
communications device via the communications link; 

characteris e d in that wherein the method further comprises the step of providing 
( 4 02, 4 05) integrity protection of the messages communicated between the server 
communications device and the client communications device via the communications link. 



2. (CURRENTLY AMENDED) A The method according to claim 1, charact e ris e d in that 
wherein the step of providing integrity protection further comprises calculating, based on a 
secret session key, a respective message authentication code for each of the communicated 
messages; and including the calculated message authentication code into the corresponding 
communicated message. 

3 . (CURRENTLY AMENDED) A The method according to claim 2, characterised in that 
wherein the step of establishing a communications link between the client and server 
communications devices comprises determining a secret session key based on a shared secret 
between the server and client communications devices. 



4. (CURRENTLY AMENDED) A The method according to claim 3, characterised in that 
wherein the method further comprises providing the shared secret by performing a secure pairing 
procedure including receiving a passcode by at least one of the client communications device 
and the server communications device. 

5. (CURRENTLY AMENDED) A The method according to claim 4, characterised in that 
wherein the passcode is at the most 48 bits long. 

6. (CURRENTLY AMENDED) A The method according to claim 3, characterised in that 
wherein the communications link has a secret link key related to it and the method further 
comprises providing the shared secret by calculating the shared secret using the secret link key 
as an input. 

7. (CURRENTLY AMENDED) A The method according to any one of claims 2 through 
6, characterised in that wherein the method further comprises: 

incorporating a value of a first counter in each of the messages communicated from the 
client communications device to the server communications device, the first counter being 
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indicative of the number of messages communicated from the client communications device to 
the server communications device; and 

incorporating a value of a second counter in each of the messages communicated from 
the server communications device to the client communications device, the second counter being 
indicative of the number of messages communicated from the server communications device to 
the client communications device; and 

wherein the step of calculating a respective message authentication code for each of the 
communicated messages comprises calculating a message authentication code for each of the 
communicated messages and the corresponding counter value. 

8. (CURRENTLY AMENDED) A The method according to anyono of claims claim 1 
through 7 charact e rised in that 3 wherein the method further comprises determining, for the 
messages communicated from the client communications device to the server communications 
device, whether the message is authorised to address the subscription module. 

9. (CURRENTLY AMENDED) A The method according to claim 8, characterised in that 
wherein the method further comprises^ 

providing a shared secret between the client communications device and the server 
communications device; and 

providing an access control list stored in the server communications device in relation to 
at least one of the shared secret and the client communications device. 



10. (CURRENTLY AMENDED) A communications system comprising a client 
communications device (106,206) and a server communications device (101,201) including a 
subscription module (102;202) , the client and server communications devices each comprising 
respective communications means (U0,10 4 ;20 4 ,210) for establishing a communications link 
(115) between the client communications device and the server communications device, and for 
communicating a number of messages comprising data related to the subscription module 
between the server communications device and the client communications device via the 
communications link; 

characterised in that wherein the client communications device and the server 
communications device each comprise respective processing means (105,107;203,209) adapted 
to provide integrity protection of the messages communicated between the server 
communications device and the client communications device via the communications link. 



11. (CURRENTLY AMENDED) A server communications device including a subscription 
module, the server communications device comprising communications means for establishing a 
communications link with a client communications device, and for communicating a number of 
messages comprising data related to the subscription module between the server 
communications device and the client communications device via the communications link; 

charact e ris e d in that wherein the server communications device comprises processing 
means adapted to provide integrity protection of the messages communicated between the server 
communications device and the client communications device via the communications link. 
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12. (CURRENTLY AMENDED) A client communications device for providing access to a 
subscription module of a server communications device, the client communications device 
comprising communications means for establishing a communications link with the server 
communications device including the subscription module, and for communicating a number of 
messages comprising data related to the subscription module between the client communications 
device and the server communications device via the communications link; 

charact e rised in that wherein the client communications device comprises processing 
means adapted to provide integrity protection of the messages communicated between the client 
communications device and the server communications device via the communications link. 

13. (CURRENTLY AMENDED) A method of providing to a client communications device 
access to a subscription module by a server communications device comprising the subscription 
module, the method comprising the steps of 

establishing (301) a communications link between the client communications device 
(300) and the server communications device (310) ; and 

receiving ( 4 0 4 ) a number of messages from the client communications device by the 
server communications device via the communications link, the messages addressing the 
subscription module (318) ; and 

charact e ris e d in that wherein the method further comprises the step of determining (701) , 
for at least one of the received messages, whether the message is authorised to address the 
subscription module. 

14. (CURRENTLY AMENDED) A The method according to claim 13, characterised in 
that wherein the method further comprises providing integrity protection of the messages 
communicated between the server communications device and the client communications device 
via the communications link, where the integrity protection is based on a shared secret between 
the client communications device and the server communications device; and providing an 
access control list stored in the server communications device in relation to at least one of the 
shared secret and the client communications device. 

1 5 . (CURRENTLY AMENDED) A The method according to claim 1 4, charactoriGod in 
that wherein the access control list is stored in a protected database. 

16. (CURRENTLY AMENDED) A The method according to claim 14 or 1 5, characterised 
in that wherein the method further comprises calculating, based on a secret session key, a 
respective message authentication code for each of the communicated messages; and including 
the calculated message authentication code into the corresponding communicated message. 

17. (CURRENTLY AMENDED) A The method according to claim 1 6, characteris e d in 
that wherein the step of establishing a communications link between the client and server 
communications devices comprises determining the secret session key based on said shared 
secret between the server and client communications devices. 
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1 8. (CURRENTLY AMENDED) A The method according to claim 1 7, characteri s ed in 
that wherein the method further comprises providing the shared secret by performing a secure 
pairing procedure including receiving a passcode by at least one of the client communications 
device and the server communications device. 



19. (CURRENTLY AMENDED) A The method according to claim 18, characterised in 
feat wherein the passcode is at the most 48 bits long. 

20. (CURRENTLY AMENDED) A The method according to claim 1 8, charact e ri s ed in 
feat wherein the communications link has a secret link key related to it and the method further 
comprises providing the shared secret by calculating the shared secret using the secret link key 
as an input. 

2 1 . (CURRENTLY AMENDED) A The method according to any one of claims claim 1 4 
through 20 , charact e ris e d in that wherein the method further comprises; 

incorporating a value of a first counter in each of the messages communicated from the 
client communications device to the server communications device, the first counter being 
indicative of the number of messages communicated from the client communications device to 
the server communications device; and 

incorporating a value of a second counter in each of the messages communicated from 
the server communications device to the client communications device, the second counter being 
indicative of the number of messages communicated from the server communications device to 
the client communications device; and 

wherein the step of calculating a respective message authentication code for each of the 
communicated messages comprises calculating a message authentication code for each of the 
communicated messages and the corresponding counter value. 

22. (CURRENTLY AMENDED) A server communications device including a subscription 
module, the server communications device comprising communications means for establishing a 
communications link with a client communications device, and for receiving a number of 
messages addressing the subscription module from the client communications device via the 
communications link; and 

characteris e d in that wherein the server communications device comprises processing 
means for determining, for at least one of the received messages, whether the message is 
authorised to address the subscription module. 
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